If your Agents are using IE then that's all you need, otherwise, FireFox has it's own list of Trusted Root CA's and you'll need to supply the Trusted Root CA cert to each individual FF browser.<br><br><div class="gmail_quote">On Thu Feb 05 2015 at 12:41:14 PM Brian Meade <<a href="mailto:bmeade90@vt.edu" target="_blank">bmeade90@vt.edu</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">You can run the CA on your domain controller which all domain users will trust certificates from automatically.</div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 5, 2015 at 12:52 PM, Jose Colon II <span dir="ltr"><<a href="mailto:jcolon424@gmail.com" target="_blank">jcolon424@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thanks Brian, How would I go about issuing a internal CA that does not require the Finesse user to accept multiple certificates. My users are not that tech savvy and there are over 300 of them that will need to come monday morning.</div><div><div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Feb 5, 2015 at 11:38 AM, Kevin Przybylowski <span dir="ltr"><<a href="mailto:kevinp@advancedtsg.com" target="_blank">kevinp@advancedtsg.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Another nice CSR decoder: <a href="https://www.networking4all.com/en/support/tools/csr+check/" target="_blank">https://www.networking4all.<u></u>com/en/support/tools/csr+<u></u>check/</a><br>
<div><div><br>
<br>
-----Original Message-----<br>
From: cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@<u></u>puck.nether.net</a>] On Behalf Of Jason Aarons (AM)<br>
Sent: Thursday, February 5, 2015 12:08 PM<br>
To: Gary Parker; <a href="mailto:jcolon424@gmail.com" target="_blank">jcolon424@gmail.com</a><br>
Cc: Cisco VOIP<br>
Subject: Re: [cisco-voip] 10.5.1 UCCX Certificate for Finesse<br>
<br>
I've run into this before TX vs Texas<br>
<br>
Use this to view your CSR and then fix via the set web-security commands etc<br>
<br>
<a href="http://certlogik.com/decoder/" target="_blank">http://certlogik.com/decoder/</a><br>
<br>
<br>
<br>
<br>
-----Original Message-----<br>
From: cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@<u></u>puck.nether.net</a>] On Behalf Of Gary Parker<br>
Sent: Thursday, February 5, 2015 11:55 AM<br>
To: <a href="mailto:jcolon424@gmail.com" target="_blank">jcolon424@gmail.com</a><br>
Cc: Cisco VOIP<br>
Subject: Re: [cisco-voip] 10.5.1 UCCX Certificate for Finesse<br>
<br>
<br>
> On 5 Feb 2015, at 16:37, Jose Colon II <<a href="mailto:jcolon424@gmail.com" target="_blank">jcolon424@gmail.com</a>> wrote:<br>
><br>
> I am trying to generate certificate request from 10.5.1 UCCX box and the cert it generates is not working with verasign. It tells me "The State Name in the CSR cannot be abbreviated"<br>
><br>
> Anyone have any suggestions?<br>
<br>
Hi Jose, have a look at your CSR using:<br>
<br>
openssl req -text -noout -verify -in CSR.csr<br>
<br>
where CSR.csr is your csr file.<br>
<br>
Mine, for example, reads:<br>
<br>
Subject: C=GB, ST=Leicestershire, L=Loughborough, O=Loughborough University, OU=ITS, CN=<a href="http://tainter.lboro.ac.uk/serialNumber=xxxxxxxxxxxxxxxxxxxxxxxxx" target="_blank">tainter.lboro.ac.uk/<u></u>serialNumber=<u></u>xxxxxxxxxxxxxxxxxxxxxxxxx</a><br>
<br>
On the “Subject:” line is the entry for ST= an abbreviated version of your State name? If so I’d imagine you’ll have to login on the command line for the server and use “set web-security” to change the State to a proper value.<br>
<br>
If I had ST=Leics it would also likely fail.<br>
<br>
Be aware that this *may* make you have to relicense the server (I’m not sure if changing state is enough to trigger this).<br>
<br>
<br>
---<br>
/-Gary Parker------------------------<u></u>----------f--\<br>
| Unified Communications Service Manager |<br>
n Loughborough University IT Services |<br>
| Tel: <a href="tel:%2B441509635635" value="+441509635635" target="_blank">+441509635635</a> Mob: <a href="tel:%2B447989172258" value="+447989172258" target="_blank">+447989172258</a> o<br>
| <a href="http://delphium.lboro.ac.uk/pubkey.txt" target="_blank">http://delphium.lboro.ac.uk/<u></u>pubkey.txt</a> |<br>
\r----------------------------<u></u>------------------d-/<br>
<br>
<br>
<br>
<br>
</div></div><div><div>______________________________<u></u>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<u></u>mailman/listinfo/cisco-voip</a><br>
</div></div></blockquote></div><br></div>
</div></div><br>______________________________<u></u>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<u></u>mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>
______________________________<u></u><u></u>_________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/<u></u>mailma<u></u>n/listinfo/cisco-voip</a><br>
</blockquote></div>